API security

Hi,
The CRM is really your ultiate tool.
I'm trying to secure communication with external applications.
Though, I would like to be able to:
- restrict API access to a list of calling domains (or IP)
- restrict API calls to a list of tables (or the reverse)

Thanks in advance.

Regards,